GROWTH OF THE NUMBER OF GEODESICS 
BETWEEN POINTS AND INSECURITY FOR 
RIEMANNIAN MANIFOLDS 

KEITH BURNS AND EUGENE GUTKIN 

Abstract. A Riemannian manifold is said to be uniformly secure 
if there is a finite number s such that all geodesies connecting an 
arbitrary pair of points in the manifold can be blocked by s point 
obstacles. We prove that the number of geodesies with length < T 
between every pair of points in a uniformly secure manifold grows 
polynomially as T ^ oo. By results of Gromov and Mane, the 
fundamental group of such a manifold is virtually nilpotent, and 
the topological entropy of its geodesic flow is zero. We derive from 
this that a compact Riemannian manifold with no conjugate points 
whose geodesic flow has positive topological entropy is totally in- 
secure: the geodesies between any pair of points cannot be blocked 
by a finite number of point obstacles. 
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1. Introduction 

This paper explores interactions between two approaches to the study 
of geodesies in a Riemannian manifold. Both approaches study geo- 
desic segments between points of the manifold. One of them relates 
the growth as T oo of the number of these geodesies with length 
< T to the topological entropy of the geodesic flow. The other studies 
whether or not these geodesies can be blocked by a finite number of 
point obstacles. 

Let M be a compact Riemannian manifold that is uniformly secure 
with security threshold s. This means that the geodesies between any 
two points in M can be blocked by s obstacles. Our main technical 
result concerns the growth rate of joining geodesies in such a manifold. 
We show that there are constants C and d, which depend only on 
s and the injectivity radius, such that the number of geodesies with 
length < T between any pair of points in M is bounded from above 
by CT'^. See Proposition 14 . 1 1 and Theorem 14. 2 [ This bound has strong 
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consequences for the geometry and topology of M. In particular, its 
fundamental group is virtually nilpotent. See Theorem 14.31 

Our methods yield strong results for manifolds with no conjugate 
points. In particular, a compact manifold with nonpositive curvature 
satisfies the following dichotomy. Either such a manifold is flat and the 
geodesies between every pair of points are blocked by a finite number 
of obstacles; or the manifold is not flat and removing a finite number 
of points from the manifold cannot block the geodesies connecting any 
pair of points. See Corollary 14.71 

We thank J.F. Lafont and B. Schmidt for pointing out a simplifica- 
tion to our original proof of Theorem 14.51 They have independently 
studied connections between security and the geometry of a manifold 
In particular, they have obtained Theorem 14.51 and the lemmas in 
Section [31 
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2. Background and Previous Results 

Throughout this paper by a (Riemannian) manifold we will mean a 
complete, connected, infinitely differentiable (Riemannian) manifold. 
Geodesies will always be parametrized by arclength. Unless otherwise 
specified, a geodesic will be a segment of finite, positive length. Let M 
be a Riemannian manifold. If [a, h] is a closed bounded interval and 
7 : [a, 6] — > M is a geodesic, the endpoints of 7 are its initial point 7(a) 
and its final point '~f{b). The points 7(s), where a < s < b, are the 
interior points of 7. We will say 7 passes through z to indicate that 
z is an interior point of 7. Note that a point z E M may be both an 
interior point and an endpoint of 7. 

A configuration in M is an ordered pair of points in M. The points 
in question may coincide. 

Definition 2.1. Let [x, y) be a configuration in M. A geodesic 7 joins 
X to ?/ if X is its initial point and y is its final point. A geodesic 7 
connects x and y if it joins x and y and does not pass through either x 
or y. 

We denote the set of geodesies joining x and y by G{x, y) and the set 
of geodesies connecting x and y by r(x, y). Of course r(x, y) C y). 
The subsets of G{x,y) and T{x,y) consisting of geodesies with length 
< T will be denoted by Gt{x, y) and Tt{x, y) respectively. Let mT{x, y) 
be the number of geodesies in rr(x, and let nT{x,y) be the number 
of geodesies in Gt{x, y). If one of the sets is infinite, the corresponding 
number will be 00. 
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2.1. Growth of nT{x,y). The behavior of nT{x,y) for compact man- 
ifolds has been extensively studied beginning with Berger and Bott's 
1962 paper |T]. They observed that for each T > the function nT{x, y) 
is finite and locally constant on an open subset of M x M of full Rie- 
mannian measure. We will use the notation dfi{x) for the density of 
this measure. Denote by B{x,T) the ball of radius T in the universal 
cover of M around a lift x of x. By Proposition 4.3 in pp, 



nr(x, y) dfi{y) > VolB{x, T) 



M 



for any x G M. 

Let h = h{M) be the topological entropy of the geodesic fiow. Man- 
ning showed in [13] that 

h > lim ^logYol B{x,T); 

T—>oo T 

the limit on the right hand side exists and is the same for all points x 
in the universal cover. Mane improved this estimate in [13] by showing 
that 



(2) 
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nrix^y) d(x{x)dn{y) 



MxM 



for any compact Riemannian manifold. 

A Riemannian manifold has no conjugate points if the exponential 
map at any point is a local diffeomorphism. An equivalent charac- 
terization is that any two points in the universal cover are joined by 
exactly one geodesic. The preceding relations are even stronger for 
compact manifolds with no conjugate points. In this case nxi^x^y) is 
always finite, and for any x,y & M we have 



(3) 



h 



lim -lognr(a;,y). 

T — ^oo 1 



See for example Corollary 1.2 in [13] . 

Equation ([3]) fails, in general, if M has conjugate points. There are 
examples where the growth of nT{x,x) is arbitrarily large for some 
exceptional points x G M [3J. There are also examples in which the 
limit in equation (j3|) is smaller than the topological entropy for an open 
set of configurations [4j. 

2.2. Security and insecurity. A set i? is a blocking set for a collec- 
tion of geodesies if every geodesic belonging to the collection passes 
through a point of B. 
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Definition 2.2. A configuration {x, y) is secure if tlie collection T{x, y) 
of connecting geodesies has a finite blocking set. Otherwise the config- 
uration is insecure. 

A blocking set for r(x, y) must lie in M \ {x, y}. It is also a blocking 
set for G{x, y). 

If the configuration {x,y) is secure, its security threshold a{x,y) is 
the minimal number of points needed to block r(a;, y). 

Definition 2.3. A Riemannian manifold is secure if every configura- 
tion is secure, insecure if some configurations are insecure, and totally 
insecure if every configuration is insecure. It is uniformly secure if there 
is s < oo such that a{x, y) < s for all x,y E M. The smallest such s is 
the security threshold of the manifold. 

In a geometric optics interpretation, a configuration is secure if one 
of the points can be shaded from the light emanating from the other 
by a finite number of point screens. Another obvious interpretation 
of Definition 12.21 suggested the name "security" : all geodesic paths 
connecting elements in a secure configuration can be monitored from a 
finite number of observation spots. Since the security of configurations 
concerns the global properties of geodesies, it is instructive to compare 
spaces from this viewpoint. 

The framework of security arose in the context of polygonal billiards. 
(The geodesies are the billiard orbits.) A polygon P C is rational 
if the angles of P are commensurable with vr. The billiard orbits in 
a rational polygon P correspond to the geodesies in the associated 
translation surface S = S{P). These surfaces are endowed with flat 
metrics with special cone singularities. Definitions 12.21 and 12.31 extend 
to polygons and translation surfaces. 

The results on security in this context are limited up to now to 
lattice polygons and lattice translation surfaces. The lattice condition 
was introduced by Veech; the class of lattice translation surfaces parti- 
tions into two subclasses: arithmetic and nonarithmetic [8]. From the 
security standpoint, these subclasses complement each other: An arith- 
metic translation surface is uniformly secure; almost all configurations 
in a nonarithmetic translation surface are insecure [7]. This dichotomy 
holds for billiard orbits in lattice polygons as well [7]. 

Gutkin and Schroeder investigated the security of compact, locally 
symmetric spaces in p]. Let M be such a space. Then M = S/T, 
where is a simply connected symmetric space, and F is a discrete, 
cocompact group of isometrics freely acting on S. The space S uniquely 
decomposes into a product S = Sq x S_ x S+ of simply connected 
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symmetric spaces of euclidean type, noncompact type, and compact type 
respectively. If M = S/T where S belongs to one of the three types, 
we say that M is a compact, locally symmetric space of that type. 

We summarize the results of [9| in the following proposition. 

Proposition 2.4. Let M be a compact, locally symmetric space. Then 
the following statements hold: 

a) If M is of noncompact type then it is totally insecure. 

b) If M is of compact type then it has an open, dense, full measure set 
of secure configurations; it always has insecure configurations as well. 

c) If M is of euclidean type then it is uniformly secure, and its security 
threshold is bounded in terms o/dim(M). 

d) If M is secure, then it is of euclidean type. 

3. Key Lemmas 

The main results of this paper, which are presented in the next sec- 
tion, are based on the following lemmas. They have been obtained 
independently by Lafont and Schmidt [TT] . 

Lemma 3.1. Let M be a compact Riemannian manifold, and let S be 
its injectivity radius. Then for any x,y & M we have 

mT{x,y) < nT{x,y) < (^^^ mT{x,y). 

Proof. The left hand inequality is obvious because Tt{x, y) C Gt{x, y). 
We prove the other one by constructing a surjective map A : Gt{x, y) 
TT{x,y) that is at most (T/26y : 1. 

Observe firstly that if t and t' are consecutive times when a geodesic 
passes through a point, z, then 26 < \t — t'\. Indeed, the geodesic must 
travel (at least) from the center of the ball B{z, 6) to its boundary, 
and then back. An immediate corollary is that the set of times when 
a geodesic passes through z is discrete. 

Let 7 : [a, 6] — ^ M be a geodesic that belongs to Grix.y). This 
means that 7(a) = x and 7(6) = y. Let h' be the leftmost element of 
(a, h] such that 7(6') = y. Let a' be the rightmost element of [a, h') 
such that 7(0') = X. Observe that the restriction of 7 to [a', h'] belongs 
to Tt^x, y) and that [a', b'] is the leftmost subinterval of [a, b] with this 
property. Furthermore, if 7 already belongs to Txix^y)., we will have 
a' = a and b' = b. 

Define A (7) to be the restriction of 7 to [a',b']. The resulting map 
A : GT{x,y) — > rT{x,y) is surjective because it is the identity on 
^T{x,y). 
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Let 7' : [a\h'] M belong to VT{x,y). We will investigate the 
preimage A'"^(7') C Gt{x, y). Let 7 : R — > M be the extension of 7' to 
a complete geodesic. The geodesies in A^^(7') are the restrictions of 7 
to intervals of the form [a, h] such that 7(a) = x and 7(6) = y. We must 
also have a < a' < b' < b, and |6 — a| < T. These inequalities ensure 
that a e [b' — T,a'] and 6 e [b',a' + T]; both of these intervals have 
length < T. We see from the remarks at the beginning of the proof 
that there can be at most T/2S possible choices for a G [b' — T, a'] with 
7(a) = X. Similarly there can be at most T/26 possible choices for 
b e [b', a' + T] with 7(6) = y. It follows that 7' has at most {T/26y 
preimages under A, as desired. ■ 

Lemma 3.2. Let M be a compact Riemannian manifold. Let TtIx, y; z) 
denote the subset of geodesies in rr(x, y) that pass through z x,y. 
Let rriTix, y; z) be the number of geodesies in rr(x, y; z). Then 

mrix, y; z) < mT/2{x, z) + mr/2(^, y)- 

Proof. We construct a 1:1 map /i : rT{x, y; z) — > Tt/2{x, z) 1}Vt/2{z, y). 

Suppose 7 : [a, 6] — > M is a geodesic in TT{x,y;z). Let 71 be the 
initial segment of 7 that ends at the first time when 7 passes through 
z\ let 72 be the terminal segment of 7 that starts at the last time when 
7 passes through z. Observe that 71 and 72 both belong to r(a;, 2;) U 
T{z, y), and their domains are subintervals of [a, b] that intersect in at 
most one point. 

Since the total length of 71 and 72 is at most T, at least one of 
them has length < T/2. Set iJ,{j) = 71 if 71 has length < T/2 and set 
l^il) = 72 otherwise. We will now show that /i is 1:1. 

A geodesic in r{x, z) can be extended past z to obtain a geodesic in 
r(a;, y) in at most one way: we must stop at the first time (if there is 
one) when the geodesic reaches y. Similarly, a geodesic in r{z,y) can 
be extended past z in at most one way to obtain a geodesic in T{x, y). 

Thus each 71 e Vt/2{x, z) can be the intial segment for at most one 
7 G T{x^y). Similary, each 72 G T'r/2{z^ y)) can be the terminal segment 
for at most one 7 G V{x,y). Therefore the mapping : rr(a;, y;^) 
rT/2(a;, z) U Tt/2{z.i y) is injective. ■ 
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4. Main Results 

Our main technical result relates the security threshold of a manifold 
with the growth rate of joining geodesies. 

Proposition 4.1. Let M be a compact Riemannian manifold, and let 
S be its injectivity radius. Suppose that M is uniformly secure, and let 
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s = s{M) be the security threshold. Then for any x,y E M we have 

rp\ 3+log2 S 



riT^x.y) < 2 ■ (^7 

Proof. By the uniform security assumption, any configuration (p, q) G 
M X M has a blocking set B{p,q) C M \ {p, q} containing at most s 
points. From Lemma 13.21 we have 

mrix, y) < ^ (^7/2(3;, z) + mT/2{z, y)) . 

The right hand side of this inequahty has the form '^mT/2{Pi,(li), 
where the {pi,qi) run through a finite set, Vi, of pairs of points in M 
with at most 2s elements. 

Iterating the estimate above k times, we obtain a sequence, Vk, of 
subsets of M X M, such that Vk has at most (2s)*' elements and 

(5) rriT^x.y) < ^ rnT/2'^iPi, Qi)- 

Observe that for any L > we have mL{pi,qi) < sup^^^g^^ mL(p, g). 
Combining this with inequality ([5]) yields 

(6) rriT^x.y) < {2sf sup mr/2fc(p,g). 

p,q&M 

Now choose G N so that log2(-|) < k < H-log2(|^), or equivalently 

- < -r < 6. 

2-2^ 

Since T/2^ < 5, we have mj'/2'= (P; < 1 fo^' ^"^Y Substituting 
this into inequahty (I6l), we obtain 

(7) mT{x,y) <2s{- 

Combining this inequality with Lemma 13.11 yields the claim. ■ 

Proposition 14.11 directly implies that a uniformly secure manifold has 
uniform polynomial growth of geodesies. The following theorem states 
this precisely. Recall that a positive function /(T) has polynomial 
growth if there are constants C and d such that /(T) < CT'^ as T ^ 00. 
The minimum possible d is the degree of the polynomial growth. 

Theorem 4.2. Let M he a compact Riemannian manifold. If M is 
uniformly secure, then there are positive constants C and d such that 
for any pair x,y E M we have 

nT{x,y)<CT''. 
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This inequality yields strong consequences for the geometry and 
topology of secure manifolds. 

Theorem 4.3. Let M be a compact Riemannian manifold that is uni- 
formly secure. Then the topological entropy of the geodesic flow for M 
is zero, and the fundamental group of M is virtually nilpotent. 
If, in addition, M has no conjugate points, then M is flat. 



Proof. Our first claim is immediate from equation 
Set 



and Theorem l4.2[ 



N{x,T) 



nT{x,y) dy. 



M 



By Theorem 14.21 N{x, T) has polynomial growth as T ^ oo for any 
X G M. By equation ([T]), this implies polynomial growth as T ^ oo 
of the volume of the ball B{x,T) C M of radius T in the universal 
cover of M, which in turn immediately implies polynomial growth of 
the fundamental group of M. The latter means that for a finite set S 
of generators for 7Ci{M) the number of elements of 7ri(M) expressible 
as words of length < n in the alphabet S has polynomial growth. 
Polynomial growth for one finite set of generators implies polynomial 
growth of the same degree for any finite set of generators. 

By a famous theorem of Gromov, a finitely generated group with 
polynomial growth is virtually nilpotent [5], i.e. it has a finite index 
nilpotent subgroup. This proves our second claim. Our last claim 
now follows from a recent result of Lebedeva [12] : if the fundamental 
group of a compact Riemannian manifold with no conjugate points has 
polynomial growth, then the manifold is fiat. ■ 

Theorem 14.31 has an immediate corollary. 

Corollary 4.4. Let M be a compact manifold. If 7Ti{M) is not virtu- 
ally nilpotent, then M does not admit a uniformly secure Riemannian 
metric. 

Our next result concerns manifolds with no conjugate points. It has 
been obtained independently by Lafont and Schmidt [TT] . 

Theorem 4.5. Let M be a compact Riemannian manifold with no con- 
jugate points whose geodesic flow has positive topological entropy. Then 
M is totally insecure. 



Proof. Let p, g G M be arbitrary. From equation 
we have 

(8) lim —logmT{p,q) = h. 

T—fOo 1 



and Lemma Em 
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This is where we use the no conjugate points property. 

Suppose now that the claim is false. Then there are two points 
x,y & M such that any geodesic from x to ?/ is blocked by one of a 
finite number of points, say zi, . . . ,Zn- Lemma [3l2] tells us that 



mrix, y) = ^ {inT/2{x, zi) + mT/2{zi, y)) 



for any T > 0. Consider a number a > 1. By ([8]), there is a Tq = To(a) 
such that for any T >Tq and any p,q & {x, y,Zi, . . . , Zn} we have 

h/a < —logmT{p,q) < ah, 



T 



which is equivalent to 



< mxip, q) < e 



hTa 



Combining this with equation (Q, we obtain 

for all large enough T. Now choose a < ^/2. Then the exponent on 
the left is larger than the exponent on the right, and the inequality is 
absurd for large T. ■ 

Theorem 14. 51 and the variational principle for entropy jiij immediately 
imply the following proposition. 

Corollary 4.6. Let M be a compact Riemannian manifold with no 
conjugate points. If the geodesic flow of M has positive metric entropy, 
then the manifold M is totally insecure. 

Any compact, locally symmetric space of noncompact type satisfies 
the hypotheses of Theorem 14.51 This gives a new proof of 
in Proposition 12. 4[ The original proof in [H] used an entirely different 
approach. 

For manifolds of nonpositive curvature we obtain a dichotomy along 
the lines security/insecurity. 

Corollary 4.7. A compact Riemannian manifold of nonpositive cur- 
vature is either totally insecure or uniformly secure. In the latter case 
the manifold is flat; its security threshold is hounded above in terms of 
the dimension of manifold. 

Proof. Let M be a compact Riemannian manifold of nonpositive curva- 
ture. By Pesin's formula (Corollary 3 in [l5j), the following dichotomy 
holds: either i) the geodesic flow for M has positive entropy, or ii) M 
is fiat. 
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If i) holds, then M satisfies the hypotheses of Corollary I4.6t thus, M 
is totally insecure. In case ii), M is a compact, locally symmetric space 
of euclidean type. The claim follows from case (c) of Proposition 12.41 
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5. Examples, conjectures and open problems 

We begin by producing examples of insecure manifolds with conju- 
gate points. 

Lemma 5.1. A configuration in a Riemannian product M x M' is 
secure if and only if its projections to M and M' are secure. 

Proof. Geodesies in MxM' are products of geodesies in M and geodesies 
in M' . More precisely, if 7 : [a,b] —>■ M and 7' : [a', b'] —>■ M' are unit 
speed geodesies, then the unit speed geodesic 7 x 7' in M of length 
L = ^{h - af + ih' - a'f is defined by 

(7X7')(t) = {n{a + {h-a)t/L),i{a' +{h' -a')t/L) 

for < t < L. All geodesies in M x M' arise in this way. 

Let ^ = (x, x') and 77 = {y,y') be two points in M x M' . The set 
G{^,vi) consists of the products of geodesies in G{x,y) and G{x',y'). 
Let ro(^, rj) be the subset of G{C,, rj) formed by the products of geodesies 
in T{x,y) and T{x',y'). Then TQ{^,ri) C T{C^,ri). (There may be more 
geodesies in r(,^,?7), for example products of geodesies in T{x,y) and 
mG{x',y')\r{x',y').) 

Suppose now that x and y form a secure configuration in M with 
blocking set B (Z M\ {x, y}, and that x' and y' form a secure configu- 
ration in M' with blocking set B' C M' \ {x', y'}. Then B and B' also 
block all the geodesies in G{x,y) and G{x',y') respectively, li x y 
and x' 7^ y', the set B x B' will block all geodesies in G{^, rj). li x = y, 
we will also use the blocking points {x,b'), where b' G B', in order to 
block geodesies from ^ to 77 that have constant projection to the first 
factor. Similarly if x' = y', we include the points {b,x'), where b & B, 
in our blocking set. In all cases, we produce a finite set Z C M x M', 
such that B X B' (Z Z <Z M X M' \ {C,,T]}, blocking all geodesies in 

Conversely, if ^ and rj form a secure configuration, there is a finite 
set of points {zi, z[), . . . , {zn, z'^) in M x M' which block all geodesies in 
ro(^, rj). Then {zi, . . . , Zn} is a blocking set for T{x, y) and {z[, . . . , z'^} 
is a blocking set for r(a;', y'). ■ 

The following criteria for security and insecurity follow immediately 
from the preceding lemma and its proof. 
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Proposition 5.2. Let M and M' be Riemannian manifolds. Then the 
following statements hold. 

1) If one of M and M' is (totally) insecure, then M x M' is (totally) 
insecure. 

2. M X M' is (uniformly) secure if and only if both M and M' are 
(uniformly) secure. 

Remark 5.3. Lemma 15.11 and Proposition 15.21 are closely related to 
Proposition 5 and Corollary 4 in [9J. They extend to fibre bundles 
such that each point of the base has a neighborhood, O, over which the 
fibration is the Riemannian product of O and the fibre. We leave the 
details to the reader. 
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Combining Proposition 15.21 with Theorem 14.51 immediately gives the 
following result. 

Corollary 5.4. Let M he a compact Riemannian manifold with no 
conjugate points whose geodesic flow has positive topological entropy. 
Let M' he a Riemannian manifold. Then the Riemannian product M x 
M' is totally insecure. 

This proposition provides us with examples of totally insecure man- 
ifolds that have conjugate points. 

The hypothesis of no conjugate points in Theorem 14.51 is used only 
to ensure that equation ([3]) holds. One can strengthen equation ([3]) by 
showing that the convergence to the limit is uniform for all p,q E M. 
The proof of Theorem 14.51 does not require this uniformity. 

In fact, in order to prove Theorem 14.51 we need considerably less 
than equation ([3]). It suffices to have positive constants hi and h2 such 
that /i2 < 2/ii, and such that for arbitrary pairs p,q E M and all large 
enough T we have the inequality 



up_low_eq (10) 



e < nxip, q) < e 



h2T 



Suppose that inequality flTU]) holds. Then all configurations in M are 
insecure, whether there are conjugate points or not. We believe that 
many Riemannian manifolds satisfy this condition, but the only ex- 
amples that we know presently are the manifolds with no conjugate 
points. 

Following another approach, we can replace inequality (ITOl) by 
(11) sup limsup — logn2-(a;, y) < 2 liminf — lognj'(j9, g) < cxD. 

x,y&M T^oo T T^oo T 
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Similarly, inequality ( fTTi) implies that the pair p,q & M is insecure. 
We believe that inequality ffTT]) frequently holds, but do not know any 
examples outside the realm of manifolds with no conjugate points. 

Examples show that one cannot simply discard the hypothesis of no 
conjugate points from Theorem 14.51 In fact, the claim does not extend 
to all manifolds whose geodesic flows have positive topological entropy. 
There are compact Riemannian manifolds with positive topological en- 
tropy that contain secure configurations. 

We outline such an example; it was used for a different purpose in 
[4]. It is a special case of a construction due to Weinstein. See [2], 
Appendix C. Choose a Riemannian metric ^ on 5*^ whose geodesic flow 
has positive topological entropy. Such metrics exist; the first was given 
by Knieper and Weiss [Tn|. Now choose a smooth family of metrics 
Qt, —7i/2 < t < 7r/2, such that Qt = ^ when |t| < 7r/6, and gt is 
the standard metric on the unit sphere in when 7r/3 < |t| < tt/2. 
Choose also a scaling function p : [— 7r/2,7r/2] — M such that p{t) = 1 
when \t\ < n/6, p(t) > when n/6 < \t\ < n/S, and p(t) = cost when 
7r/3 < |t| < 7r/2. 

Define a metric on [—tt/2, tt/2]x S"^ that is degenerate on the bound- 
ary as follows. Let t G [— 7r/2, 7r/2] denote the first coordinate. We 
require: 

(1) \\d/dt\\ ^ 1; 

(2) d/dt is everywhere orthogonal to {t} x S"^; 

(3) the restriction of the metric to the vectors tangent to {t} x 5*^ 
is p{t)gt. 

The result is a smooth metric g on S^. The spheres {±7r/2} x 5*^ 
collapse to points, p and p', which we call poles. The metric g coincides 
with the standard round metric on 5*^ near the poles. 

The spheres {t} x S'^ for \t\ < vr/6 are totally geodesically isomet- 
rically embedded copies of (S^,^); this ensures that the geodesic flow 
for the metric g on 5''^ has positive entropy. The geodesies which pass 
through the poles are circles of length 2tt and are orthogonal to the 
"spheres of latitude". They are meridians just as in the usual round 
metric on S^; the only difference is that the spheres of latitude have an 
unusual geometry away from the poles. All meridians that leave one 
pole focus at the opposite pole after distance n. The pairs {p,p) and 
{p',p') are secure configurations because their connecting geodesies are 
blocked by the opposite pole. 

We conclude with some conjectures related to the results of this 
paper. 



ENTROPY AND INSECURITY 
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Presently, the only examples of compact Riemannian manifolds that 
are secure are the flat manifolds. We believe that this is not an accident 
and Theorems 14.21 and 14.31 are evidence for: 

Conjecture 5.5. A compact Riemannian manifold is secure if and 
only if it is flat. 

Our next conjecture concerns classical Riemannian geometry but is 
motivated by security questions, as we explain below. 

Conjecture 5.6. Let M be a compact Riemannian manifold with no 
conjugate points. Then either M is flat or its geodesic flow has positive 
topological entropy. 



If Conjecture 15.61 is true, then the alternative for manifolds with 
nonpositive curvature stated in Corollary 14. 71 would extend to compact 
Riemannian manifolds with no conjugate points. More precisely, the 
following dichotomy would hold: A compact manifold with no conju- 
gate points is either 

i) flat, uniformly secure, and has zero topological entropy for its geo- 
desic flow; or 

ii) not fiat, totally insecure, and has positive topological entropy for its 
geodesic flow. 

Finally, we suspect that there are many examples of totally insecure 
manifolds other than those described in this paper. In fact, we believe 
that "most" Riemannian manifolds are totally insecure. 

More conjectures related to security in Riemanian manifolds can be 
found in [TTj . 
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